diff --git a/recipes-core/zlib/files/CVE-2018-25032_fix.patch b/recipes-core/zlib/files/CVE-2018-25032_fix.patch index 8591de19..47e2dc1a 100644 --- a/recipes-core/zlib/files/CVE-2018-25032_fix.patch +++ b/recipes-core/zlib/files/CVE-2018-25032_fix.patch @@ -3,7 +3,7 @@ From: madler / nm296(nareshkumar_m@comcast.com Subject: CVE-2018-25032 Source: https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531# Signed-off-by: madler / nm296(nareshkumar_m@comcast.com - +Upstream-Status: Pending Index: zlib-1.2.11/deflate.c =================================================================== --- zlib-1.2.11.orig/deflate.c diff --git a/recipes-core/zlib/files/CVE-2022-37434_fix.patch b/recipes-core/zlib/files/CVE-2022-37434_fix.patch index 88297882..eda03754 100644 --- a/recipes-core/zlib/files/CVE-2022-37434_fix.patch +++ b/recipes-core/zlib/files/CVE-2022-37434_fix.patch @@ -3,6 +3,7 @@ From: sroy040 Subject: Patch selected CVEs for the multiple component listed Source: COMCAST Signed-off-by: sroy040 +Upstream-Status: Pending Index: zlib/inflate.c =================================================================== --- zlib.orig/inflate.c diff --git a/recipes-core/zlib/files/CVE-2023-45853_fix.patch b/recipes-core/zlib/files/CVE-2023-45853_fix.patch index 36fc3676..fc9acf65 100644 --- a/recipes-core/zlib/files/CVE-2023-45853_fix.patch +++ b/recipes-core/zlib/files/CVE-2023-45853_fix.patch @@ -3,7 +3,7 @@ Date: June 01, 2024 From:srihariraghava_konduritirumala@comcast.com Source: upstream https://github.com/madler/zlib/pull/843/files - +Upstream-Status: Pending --- contrib/minizip/zip.c | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/recipes-core/zlib/zlib-1.2.11/remove.ldconfig.call.patch b/recipes-core/zlib/zlib-1.2.11/remove.ldconfig.call.patch deleted file mode 100644 index 6d770586..00000000 --- a/recipes-core/zlib/zlib-1.2.11/remove.ldconfig.call.patch +++ /dev/null @@ -1,35 +0,0 @@ -Date: Mar 13 09:45:56 2019 - -From: 0fb9f1e5d6242769bb1c6d57f8e86484857fcab0 May 17 16:30:44 2019 - -Subject: [PATCH] RDKALL-1627 : Security Vulnerability for glibc, zlib and libtasn1 - - zlib: remove ldconfig call from install-libs - - it's called from install-libs target and when /etc/ld.so.cache is writeable by user running bitbake - then it creates invalid cache (in my case libstdc++.so cannot be found after building zlib(-native) - and I have to call touch */libstdc++.so && /sbin/ldconfig to fix it - -Source: OPENEMBEDDED - - -Upstream-Status: Submitted [ https://git.congatec.com/yocto-1-5/poky/commit/b2196ca25697bfb6c1412780a27cea5be1d80d6c ] - -Signed-off-by: Martin Jansa -Signed-off-by: Richard Purdie ---- - - -Upstream-Status: Inappropriate [disable feature] - -diff -uNr zlib-1.2.6.orig/Makefile.in zlib-1.2.6/Makefile.in ---- zlib-1.2.6.orig/Makefile.in 2012-01-28 23:48:50.000000000 +0100 -+++ zlib-1.2.6/Makefile.in 2012-02-13 15:38:20.577700723 +0100 -@@ -199,7 +199,6 @@ - rm -f $(DESTDIR)$(sharedlibdir)/$(SHAREDLIB) $(DESTDIR)$(sharedlibdir)/$(SHAREDLIBM); \ - ln -s $(SHAREDLIBV) $(DESTDIR)$(sharedlibdir)/$(SHAREDLIB); \ - ln -s $(SHAREDLIBV) $(DESTDIR)$(sharedlibdir)/$(SHAREDLIBM); \ -- ($(LDCONFIG) || true) >/dev/null 2>&1; \ - fi - cp zlib.3 $(DESTDIR)$(man3dir) - chmod 644 $(DESTDIR)$(man3dir)/zlib.3 diff --git a/recipes-core/zlib/zlib_1.2.11.bb b/recipes-core/zlib/zlib_1.2.11.bb index 13fe35a5..602de4c8 100644 --- a/recipes-core/zlib/zlib_1.2.11.bb +++ b/recipes-core/zlib/zlib_1.2.11.bb @@ -7,7 +7,6 @@ LICENSE = "Zlib" LIC_FILES_CHKSUM = "file://zlib.h;beginline=6;endline=23;md5=5377232268e952e9ef63bc555f7aa6c0" SRC_URI = "${SOURCEFORGE_MIRROR}/libpng/${BPN}/${PV}/${BPN}-${PV}.tar.xz \ - file://remove.ldconfig.call.patch \ file://Makefile-runtests.patch \ file://ldflags-tests.patch \ file://run-ptest \ diff --git a/recipes-extended/bzip2/bzip2/CVE-2019-12900_fix.patch b/recipes-extended/bzip2/bzip2/CVE-2019-12900_fix.patch index 1f603cd7..5f250718 100644 --- a/recipes-extended/bzip2/bzip2/CVE-2019-12900_fix.patch +++ b/recipes-extended/bzip2/bzip2/CVE-2019-12900_fix.patch @@ -3,6 +3,7 @@ From: sroy040 Subject: Adding CVEs in Video layer Source: COMCAST Signed-off-by: sroy040 +Upstream-Status: Pending Index: bzip2/decompress.c =================================================================== --- bzip2.orig/decompress.c diff --git a/recipes-gplv2/readline/readline_5.2.bb b/recipes-gplv2/readline/readline_5.2.bb index d42ce8bb..2e7a14ea 100644 --- a/recipes-gplv2/readline/readline_5.2.bb +++ b/recipes-gplv2/readline/readline_5.2.bb @@ -63,6 +63,13 @@ SRC_URI[patch13.sha256sum] = "0cc649516a5bdfa61c5e56937407570288b6972d75aa1bd060 SRC_URI[patch14.md5sum] = "a1be30e1c6f1099bb5fcef00a2631fb8" SRC_URI[patch14.sha256sum] = "6f1a68320d01522ca1ea5a737124ecc8739f3dcbfea2dee21e3ccf839a21a817" +D = "../downloads" +do_addupsteam() { + for p in ${D}/readline52-0*; do + sed -i '/^Patch:/i Upstream-Status: Pending' "$p" + done +} +addtask do_addupsteam after do_unpack before do_patch inherit autotools EXTRA_AUTORECONF += "--exclude=autoheader"